Closed Bug 124688 Opened 23 years ago Closed 23 years ago

<script src="https://..."> makes lock icon appear

Categories

(Core Graveyard :: Security: UI, defect, P1)

Other Branch
x86
Windows 98

Tracking

(Not tracked)

VERIFIED WORKSFORME
psm2.2

People

(Reporter: jruderman, Assigned: ddrinan0264)

References

()

Details

Attachments

(2 files)

To reproduce: load http://www.staffordconsolidation.com/coninfo.cfm.

Result: yellow or red lock icon, usually yellow.  If there's a red icon, you
also see a mixed-https-and-http dialog.

Expected: unlocked lock icon, since the page is http.

I will attach testcases that show:
1. A page with a <script src="https://..."> gets a yellow lock icon even if its
URL is http.  The script src can be a 404 and this will still happen.
2. If the https URL in the script tag redirects to an http URL, the page gets a
mixed-https-and-http dialog and a broken (red) lock icon.
Attached file script src=https
confirming with build 2002031103.
David, this seems similar to bug 125807 but the fix doesn't seem to take this
into account.



Assignee: ssaux → ddrinan
Priority: -- → P1
Target Milestone: --- → 2.2
Blocks: lockicon
Works for me with the latest commercial build (20020314). I will try a mozilla
build next.
Can't seem to reproduce with 2002031403 build.
Mozilla 2002 031403: WFM on the testcases, but I still see the bug at
http://www.staffordconsolidation.com/coninfo.cfm.
This bug should be fixed by the bug attached to bug 130949
Works for me with the test build mention right above, from kaie.
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → WORKSFORME
Verified with the 4/1 Win2000 trunk build.
Status: RESOLVED → VERIFIED
WFM 2002 040303 Win98.
Product: PSM → Core
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: